dsh-windows-readiness-proof：托管 Windows 主机的 readiness 证据校验
`dsh-windows-readiness-proof` 是一个 MIT 许可的 DSH 插件（要求 Node.js >= 22），用于验证已净化且 SHA-256 固定的 Windows 主机观测证据是否满足 DeepSeek Harness 的前置条件。该插件定位为证据验证器，不采集数据也不执行修复，而是对现有证据进行确定性校验并生成审计 artifact。 核心功能包括 `inspect`（查看状态）和 `verify`（执行校验并输出结果）两个 CLI 入口，以及对应的 DSH/MCP 工具。插件采用“Fail closed”策略，对缺失、过期、格式错误、疑似敏感信息或策略不匹配等证
Read Moredsh-audit-bundle: Generating Content-Addressed Audit Indexes for DeepSeek Harness Evidence
The dsh-audit-bundle is an MIT-licensed plugin for DeepSeek Harness, designed to provide an independent evidence verification layer. It declares audit objects through explicit manifests, verifying whether specific subject IDs and revisions possess sufficient, type-compliant, and pinned JSON evidence from independent producers to cover the declared controls. The plugin performs fail-closed verification, rejecting missing, outdated, or invalid evidence as well as non-independent producers. Upon successful verification, it generates a content-addressed JSON index containing a Merkle root, ensuring auditability. The plugin exposes both DSH tools and MCP services, supporting inspect and verify operations, although the MCP
Read More